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DETAILED ACTION 

1. Claims 1-19 have been examined. 

Information Disclosure Statement 

2. The information disclosure statement filed on February 21 , 2002 lists inaccurate 
and/or uncorrelated information in the U.S. Patent Documents section, therefore the 
patents listed in this section are not considered; however, the non-patent literature has 
been considered by the examiner in this case. 



Specification 

3. The disclosure is objected to because of the following informalities: 

a. Page 1, paragraph [0005]/line 5: "user having a many different" should be 
changed to "user having many different" 

b. Page 1, paragraph [0010]/line 4: "auto-completed" should be changed to 
"auto-complete" 

c. Page 2, paragraph [0021]/line 10: "host application, form or web site" 
should be changed to "host application, form, or web site" 

d. Page 2, paragraph [0023]/line 10: "application programs, web sites and 
forms" should be changed to "application programs, web sites, and forms" 

e. Page 2, paragraph [0026]/line 1 : "a" should be unbolded 

f. Page 3, paragraph [0039]/line 3: "finctionality" should be changed to 
"functionality" 
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g. Paragraphs [0050] [0063] [0067] and [0068]: "preferrably" should be 
changed to "preferably" 

h. Page 5, paragraph [0072]/line 7: "authorized user" should be changed to 
"unauthorized user" 

Appropriate corrections are required. 



Claim Objections 

2. Claims 1 , 7, and 1 3 are objected to because of the following informalities: 

a. Claim 1: "determining said master key value" should be changed to 
"determining if said master key value" 

b. Claim 7: "determining said master key value" should be changed to 
"determining if said master key value" 

c. Claim 13: "determining if an master key value" should be changed to 
"determining if a master key value" 

Appropriate corrections are required. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the Invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 



Application/Control Number: 1 0/082,744 Page 4 

Art Unit: 2132 

4. Claims 1-19 are rejected under 35 U.S.C. 102(b) as being anticipated by Nielsen 
(US Patent #6,182,229). 

As for independent claim 1 , Nielsen teaches a method (note column 6, lines 59-63; 
also note FIG. 3, FIG 1A, and Abstract) within a computing platform of graphically providing a 
secure field value retrieval and entry, wherein said computing platform includes a 
display device, a field activation device and a user selection device, said method 
comprising: 

displaying a user dialogue to receive a master key value from a user responsive 
to activation of a field (note column 4, lines 32-37 - the user is prompted for a master password; also 
note column 7, line 26 and line 36; also note column 4, lines 40-41); 

receiving a computing context indicator regarding the context of said activated 
field (note column 6, line 23 - master password is entered)] 

determining said master key value is a correct master key value (note column 4, 

lines 34-37 - master password stored in memory for later use; also note column 4, line 65 - user is 
prompted for master key and then verified by system against the stored value; also note column 7, line 43 
- the master password is retrieved implying correctness of the password; and FIG. 3)\ 

retrieving a field value from a secure field value store which is associated with 
said computing context, said activated field and a user identification (note column 4, lines 
59-61- authentication information is retrieved and sent to the requesting server; also note column 7, lines 
29-31 - stored password retrieved and provided to remote server, also note FIG. 2)\ and 

automatically entering said retrieved field value into said activated field (note 
column 4, lines 5-8 - the invention automatically provides the authentication information to the remote 
server; also note column 7, lines 32-34; also note FIG. 2 and FIG. 3). 
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As for claim 2, which is dependent on claim 1 , Nielsen teaches the method as set 
forth in claim 1 wherein said step of displaying a user dialogue comprises receiving a 
user identification value (note column 5, lines 46-49 - user ID and other information inputted in the 
dialog box; also note column 4, line 53-58 - user identification provided by the password management 
system). 

As for claim 3, which is dependent on claim 1 , Nielsen teaches the method as set 
forth in claim 1 wherein said step of retrieving a field value from a secure field value 
store which correlates to a computing context comprises retrieving a field value which is 
associated with an application program (note column 3, lines 60-61 - the invention could be 
incorporated into a browser program; also note column 6, lines 47-53 - the invention applies to many 
different embodiments). 

As for claim 4, which is dependent on claim 1 , Nielsen teaches the method as set 
forth in claim 1 wherein said step of retrieving a field value from a secure field value 
store which correlates to a computing context comprises retrieving a field value which is 
associated with a web site (note column 3, lines 52-54 - the invention is applicable to a plurality of 
remote servers such as remote web sites; also note FIG. 1B and FIG. 2). 

As for claim 5, which is dependent on claim 1 , Nielsen teaches The method as 
set forth in claim 1 wherein said step of retrieving a field value from a secure field value 
store which correlates to a computing context comprises retrieving a field value which is 
associated with a web form (note column 3, line 55 - an applet may contain a web form; also note 
column 6, lines 47-53 - the invention applies to many different embodiments; also note column 5, line 2 - 
registration equates to a web form). 
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As for claim 6, which is dependent on claim 1 , Nielsen teaches The method as 
set forth in claim 1 wherein said step of automatically entering said retrieved field value 
into said activated field comprises automatically entering a password value (note column 
4, lines 3-8 - the password is automatically entered in the password field and sent to the remote site). 

As for independent claim 7, Nielsen teaches a computer readable medium (note 
FIG. 1A - readable media identified; also note column 8, line 28 - software on readable medium is 
described) encoded with software (note column 3, lines 54-61 - implementation software is 

described) for graphically providing a secure field value retrieval and entry, wherein said 
computing platform includes a display device, a field activation device and a user 
selection device, said software causing the computing platform to perform the steps of: 

displaying a user dialogue to receive a master key value from a user responsive 
to activation of a field (note column 8, line 63 - software on a computer readable media is claimed; 
also note column 4, lines 32-37 - the user is prompted for a master password; also note column 7, line 26 
and line 36; also note column 4 } lines 40-41)] 

receiving a computing context indicator regarding the context of said activated 
field (note column 8, lines 39-41 - software on a computer readable media performing this function is 
claimed; also note column 6, line 23 - master password is entered)] 

determining said master key value is a correct master key value (note column 8, line 

36 - software for verification of master key is described; also note column 4, lines 34-37 - master 
password stored in memory for later use; also note column 4, line 65 - user is prompted for master key 
and then verified by system against the stored value; also note column 7, line 43 - the master password 
is retrieved implying correctness of the password; and FIG. 3)] 
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retrieving a field value from a secure field value store which is associated with 
said computing context, said activated field and a user identification (note column 8, lines 

48-51 - retrieving of user ID and password is claimed; also note column 4, lines 59-61- authentication 
information is retrieved and sent to the requesting server, also note column 7, lines 29-31- stored 
password retrieved and provided to remote server, also note FIG. 2)\ and 

automatically entering said retrieved field value into said activated field (note 

column 8, lines 42-47 - automation process described; also note column 4, lines 5-8 - the invention 
automatically provides the authentication information to the remote server, also note column 7, lines 32- 
34; also note FIG. 2 and FIG. 3). 

As for claim 8, which is dependent on claim 7, Nielsen teaches the computer 
readable medium as set forth in claim 7 wherein said software for displaying a user 
dialogue comprises software for receiving a user identification value (note column 3, line 55 

- applet software described; also note column 8, lines 23-24 - software for inputting user ID is described; 
also note column 5, lines 46-49 - user ID and other information inputted in the dialog box; also note 
column 4, lines 53-58 - user identification provided by the password management system ). 

As for claim 9, which is dependent on claim 7, Nielsen teaches the computer 
readable medium as set forth in claim 7 wherein said software for retrieving a field value 
from a secure field value store which correlates to a computing context comprises 
software for retrieving a field value which is associated with an application program (note 
column 3, lines 60-61 - the invention may be incorporated into a browser program; also note column 6, 
lines 47-53 - the invention applies to many different embodiments). 

As for claim 10, which is dependent on claim 7, Nielsen teaches the computer 
readable medium as set forth in claim 7 wherein said software for retrieving a field value 
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from a secure field value store which correlates to a computing context comprises 
software for retrieving a field value which is associated with a web site (note column 3, line 
58 - HotJava software described; also note column 3, lines 52-54 - the invention is applicable to a plurality 
of remote servers such as remote web sites; also note FIG. 1B and FIG. 2). 

As for claim 1 1 , which is dependent on claim 7, Nielsen teaches the computer 
readable medium as set forth in claim 7 wherein said software for retrieving a field value 
from a secure field value store which correlates to a computing context comprises 
software for retrieving a field value which is associated with a web form (note column 3, line 
55 - an applet may contain a web form; also note column 6, lines 47-53 - the invention applies to many 
different embodiments; also note column 5, line 2 - registration equates to a web form). 

As for claim 12, which is dependent on claim 7, Nielsen teaches the computer 
readable medium as set forth in claim 7 wherein said software for automatically entering 
said retrieved field value into said activated field comprises software for automatically 
entering a password value (note column 3, line 55 - applet software is capable of the functionality; 
also note column 4, lines 3-8 - the password is automatically entered in the password field and sent to the 
remote site). 

As for independent claim 13, Nielsen teaches a system (note column 6, line 70- 
computer system is describe) for graphically providing a secure field value storage, retrieval 
and entry within a computing platform, wherein said computing platform includes a 
display device, a field activation device, a user selection device and a data storage 
medium, said system comprising: 

a secure field value store disposed within said data storage medium (note column 
8, lines 25-27; also note column 4, line 1 - a database of passwords and user IDs are described) ] 
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a user dialogue display on said display device adapted to receive a master key 
value from a user responsive to activation of a field on said display device (note column 8, 
line 9 - master key value is received; also note column 4, lines 32-37; also note column 4, lines 40-41; 
and note FIG. 1A)\ 

a computing context indicator regarding the context of said activated field (note 
column 8, line 15; also note column 6, line 23 - master password is entered) ] 

a master key value evaluator for determining if an master key value entered via 
said user dialogue display is a correct master key value for said secure field value store 

(note column 8, line 36; also note column 4, lines 34-37 - master password stored in memory for later 
use; also note column 4, line 65 - user is prompted for master key and then verified by system against the 
stored value; also note column 7, line 43 - the master password is retrieved implying correctness of the 
password; and FIG. 3)] 

a field value retriever for finding in and retrieving from said secure field value 
store a field value which is associated with said computing context, said activated field 
and a user identification (note column 8, lines 23-24; also note column 4, lines 59-61- authentication 
information is retrieved and sent to the requesting server; also note column 7, lines 29-31 - stored 
password retrieved and provided to remote server, also note FIG. 2)\ and 

a field value inputter for automatically entering said retrieved field value into said 
activated field (note column 8, lines 17-18; also note column 4, lines 5-8 -the invention automatically 
provides the authentication information to the remote server; also note column 7, lines 32-34; also note 
FIG. 2 and FIG. 3). 

As for claim 14, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 wherein said user dialogue display is further adapted to receive a 
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user identification value, and wherein said field value retriever is further adapted to find 
and retrieve a field value which is associated with a user identification value (note column 

8, lines 10-18; also note column 3, line 55 - applet software described; also note column 6, lines 70-71 - 
software routine implementation rule explained; also note column 4, line 50 - authentication request is 
received; also note column 4, lines 53-58 - user identification provided by the password management 
system). 

As for claim 15, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 wherein said step of retrieving a password from a secure field value 
store which correlates to a computing context comprises retrieving a field value which is 
associated with an application program (note column 3, line 61 - software incorporated in a 

browser program; also note column 6, lines 70-71 - software routine implementation rule explained; also 
note column 3, lines 60-61 - the invention may be incorporated into a browser program; also note column 
6, lines 47-53 - the invention applies to many different embodiments; and note FIG. 2). 

As for claim 16, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 wherein said step of retrieving a field value from a secure field 
value store which correlates to a computing context comprises retrieving a field value 
which is associated with a web site (note column 3, line 58 - Hot Java software described; also 

note column 6, lines 70-71 - software routine implementation rule explained; also note column 3, lines 52- 
54 - the invention is applicable to a plurality of remote servers such as remote web sites; also note FIG. 
Wand FIG. 2). 

As for claim 17, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 wherein said step of retrieving a field value from a secure field 
value store which correlates to a computing context comprises retrieving a field value 
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which is associated with a web form (note column 3, line 58- Java enhanced browser implements 
the feature; also note column 6, lines 70-71 - software routine implementation rule explained; also note 
column 6, lines 47-53 - the invention applies to many different embodiments; also note column 5, line 2 - 
registration equates to a web form). 

As for claim 18, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 wherein said step of automatically entering said retrieved field value 
into said activated field comprises automatically entering a password value (note column 

8, lines 15-18; also note column 3, line 55 - applet software is capable of the functionality; also note 
column 6, lines 70-71 - software routine implementation rule explained; also note column 4, lines 3-8 - the 
password is automatically entered in the password field and sent to the remote site). 

As for claim 19, which is dependent on claim 13, Nielsen teaches the system as 
set forth in claim 13 where said field value store is a database (note column 8, lines 3-4 - 
database is claimed; also note column 4, lines 1-2 - invention maintains a database of passwords and 
user IDs as they are known to the remote sites). 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Nielsen (US Patent No. 6,006,333) teaches a password helper using a client-side 
master password that automatically presents the appropriate server-side password to a 
particular remote server. 

Sidles (US Pub. No. 2002/0062342) teaches a method for completing forms on 
wide area networks such as the Internet. 
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Liu (US Patent No. 6,484,263) teaches a security profile for web browsers. 
Dent (US Pub. No. 2002/0066039) teaches anti-spoofing password protection. 
Kelley et al. (US Patent No. 6,000,033) teaches password control via the web. 
Light et al. (US Patent # 6,192,380) teaches automatic web based form fill-in. 

Inquiries 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shahin Mizan whose telephone number is 571-272- 
0687. The examiner can normally be reached on M-F 8 a.m. - 4:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Shahin Mizan 
Examiner 
Art Unit 21 32 
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